Authentication

Exchange an approved device code for a CLI key

Changed on

RFC 8628 device access token request. Poll no faster than the returned interval. On success a project-scoped CLI key (90-day expiry) is created and returned exactly once; a lost response cannot be recovered, revoke the unused key under CLI tokens and log in again.

post/api/auth/device/token

Request

  • Base URL
    https://demo.supercheck.dev
  • Auth
    none required

Request body application/x-www-form-urlencoded

grant_type'urn:ietf:params:oauth:grant-type:device_code' required
client_id'supercheck-cli' required
device_codestring required

Response

Approved. Response is not cacheable (Cache-Control: no-store).

access_tokenstring required

Project-scoped CLI key (sck_live_*).

token_type'Bearer' required
expires_ininteger required
contextobject

Non-secret user, organization and project the key belongs to.

Changes